c-bata / kube-prompt

An interactive kubernetes client featuring auto-complete.
MIT License
1.78k stars 133 forks source link

Bump crypto package #85

Closed thedadams closed 2 years ago

thedadams commented 3 years ago

There is a CVE in the crypto package used by the kubernetes libraries. This is not fixed in the 0.17.x releases and the 0.18.x release introduces breaking changes that affect kube-prompt. Therefore, the most straightforward way to ensure that the crypto package is updated is to use the replace directive.

Fixes: https://github.com/c-bata/kube-prompt/issues/83

thedadams commented 3 years ago

@c-bata Can you take a look at this?